Abstract: Methods, systems and computer readable media for rogue access point detection are described.

Abstract: Methods, systems and computer readable media for secure VLAN within a wireless network are described.

Abstract: Methods, systems and computer readable media for location-based endpoint security are described.

Abstract: Methods, systems, and computer readable media for rogue device detection are described. A method may include identifying a device type of a device transmitting data over a network and obtaining one or more uniform resource locators (URLs) from the data, where the one or more URLs form a portion of a request transmitted over the network by the device. The method can also include programmatically analyzing the data to determine a pattern of network data within a given time period. The method can further include determining that the device is a rogue device if the pattern of network data deviates from a baseline pattern of the device type, or at least one of the one or more URLs matches one or more rogue URL criteria. The method can also include taking an action in response to determining the device is a rogue device to improve security of the network.

Abstract: Aspects of the present disclosure are directed to controlling access to resources in a network. In an embodiment, a gateway system receives a packet requesting access to a resource in the network, and identifies access control policies to be applied in determining whether or not to permit access to said first resource. The gateway system applies a higher-layer policy and then a lower-layer policy on the packet to determine whether or not to forward the packet to the network and forwards the packet to the network only if it is determined to forward the packet. The higher-layer policy and lower-layer policies are according to respective layers of a networking model.

Abstract: Methods, systems and computer readable media for rogue access point detection are described.

Abstract: Methods, systems and computer readable media for rogue access point detection are described.

Abstract: Methods, systems and computer readable media for secure VLAN within a wireless network are described.

Abstract: Methods, systems and computer readable media for secure VLAN within a wireless network are described.

Abstract: Methods, systems, and computer readable media for rogue device detection are described. A method may include identifying a device type of a device transmitting data over a network and obtaining one or more uniform resource locators (URLs) from the data, where the one or more URLs form a portion of a request transmitted over the network by the device. The method can also include programmatically analyzing the data to determine a pattern of network data within a given time period. The method can further include determining that the device is a rogue device if the pattern of network data deviates from a baseline pattern of the device type, or at least one of the one or more URLs matches one or more rogue URL criteria. The method can also include taking an action in response to determining the device is a rogue device to improve security of the network.

Abstract: Methods, systems and computer readable media for protecting networks and devices from network security attack using physical communication layer characteristics are described.

Abstract: Methods, systems and computer readable media for rogue access point detection are described.

Abstract: Methods, systems and computer readable media for rogue device detection are described. The method may include automatically generating one or more dummy network identifiers associated with a wireless network, advertising the one or more dummy network identifiers, and identifying a device as a suspect device based on receiving a connection attempt to at least one of the one or more dummy network identifiers by the device. The method can also include allocating a virtual local area network within the wireless network to process traffic associated with the at least one of the one or more dummy network identifiers, and monitoring network traffic of the suspect device on the virtual local area network. The method can further include, if the monitored network traffic meets an abnormality threshold, determining that the suspect device is a rogue device, and performing an action to protect the wireless network from the rogue device.

Abstract: A battery saving controller toggles between a normal mode and a battery saving mode which selectively processing location beacons using mobile inbuilt sensors. Bluetooth location beacons are periodically sent by nearby Bluetooth location devices for updating a current location of mobile devices. Battery power within the mobile devices is selectively used for processing the location beacon. The processing exposes the unique tag id from Bluetooth LE data packets, and determines the RSSI value of the data packets received from Bluetooth devices. The battery saving controller deactivates location beacon processing to save power usage from the battery, responsive to detecting identical packets over a time interval. Additionally, the battery saving controller reactivates location beacon responsive to at least one of the sensors inbuilt to the mobile device detecting movement of the mobile device.

Abstract: Poisoning attacks by spoofing location beacons in a WLAN are detected using silence periods. A location beacon identifier is received from a mobile device allegedly within range of a location device transmitting location beacons, along with a timestamp of transmission for each of the location beacons. Also silence periods associated with the location device, during which transmissions of location beacons are temporarily discontinued, and which are unknown to the public, are determined or retrieved. The location beacon transmission time is compared to the silence periods. Responsive to the location beacon transmission time corresponding to at least one of the silence periods, the location device flagged as poisoned.

Abstract: Methods, systems and computer readable media for secure VLAN within a wireless network are described.

Abstract: An access point associated on Wi-Fi portion of the communication network selectively groups stations according to a mobility profile. The mobility profile includes factors that characterize at least an amount of movement and current location for a station. Each station is assigned to a beamforming group of similar mobility profiles. A type of beamforming transmission is selected for each beamforming group based on mobility profiles of associated stations. The type of beamforming transmissions including at least MU-MIMO and SU-MIMO. Data is then transmitted to the stations of each beamforming group according to the selected type of beamforming transmissions. A Wi-Fi controller, having a network-wide view of conditions and being able to collect historical information about stations during connections to other access points, is able to provide data unique data to group selections.

Abstract: Reliable call hand-offs from a cellular network to a Wi-Fi network. A hand-off controller detects a hand-off condition (e.g., hand-off request, potential/predicted hand-off request) and, in response, initiates a test call. For example, a telephone call made through a smart phone, using a cellular network (e.g., Verizon, AT&T or Sprint) can be handed over to a hot spot at a Starbucks. In response to detecting an available data network, transmission quality for VOIP conditions is automatically tested. If the network conditions meet a certain predetermined threshold, the VOIP hand-off is executed. If the predetermined threshold is not met, the VOIP hand-off may not be executed, or may be delayed.

Abstract: A wireless communication network is self-provisioned using coordination of data plane behavior to steer stations to preferred access points. To do so, a policy concerning traffic flow for the wireless communication network is received. Data plane traffic flow is monitored at each of the plurality of access points distributed around the wireless communication network. At some point, it may be determined the data plane traffic flow at a first access point from needs to be reduced based on the data plane traffic flow relative to the policy. In response, a station is steered to a preferred access point using OpenFlow rules to affect data plane routing decisions at the access point (e.g., drop, delay, or reprioritize packets).

Abstract: Methods, systems and computer readable media for rogue access point detection are described.